Are you experiencing any symptoms such as WordPress behaving strangely, server administrators notifying you that your site is infected with malware, or spam emails that redirect you to other sites without your permission?
We will explain how to check if WordPress is infected with malware (virus, tampering) and how to identify the location of the file.


Inspecting a WordPress site for malware infection from the outside

You can inspect your WordPress site for malware infection from the outside by simply entering the URL.
Use Sucuri SiteCheck, a free service in this genre.

Once you are on the site, enter the URL of the site you wish to check for malware, viruses, or tampering in the central form and click the “Scan Website” button.

After a short wait, the results of the malware infection status of the site and whether the site has been registered as a malware site by search engines (black list) will be displayed.

However, the detection rate of this method is not high because the site is checked from the external code. (In our experience, the detection rate is about 50%.)
For a more in-depth look into the site, please try the following method.

Inspect the WordPress site from the inside to see if it is infected with malware.

Install and activate the Malware Scanner plugin created by WordPress Doctor on your site.
This plugin is highly accurate because it scans your site’s code by retrieving the latest malware definition patterns in real-time via our server.

From the left menu of the administration screen, click > Malware Scan > Scan Now.

The scan will begin and any malware detected will be displayed in a list.
(If there are many files, it may take several minutes to complete the scan.)

You will also be able to check the detection location of each infected file directly from the management screen.

Click here to download the plug-in.

Related Posts:

  1. If WordPress may be infected with malware (virus or tampering), use the plugin for quick malware inspection and removal.
    When WordPress may be infected with malware (virus or tampering), you can easily use a plugin to inspect and remove malware. The following is a list of the main types of malware behavior on websites and malware scanning and disinfection plug-ins....
  2. 5 symptoms that appear when WordPress is infected with malware or has been tampered with.
    The following is a list of common symptoms that occur when a site is infected with malware. If you see something wrong with the behavior of the site, please refer to these symptoms and perform a malware scan....
  3. What to do for your site users when WordPress is hacked, tampered with, or hijacked.
    This page explains how to respond to users (those who use the site) when there is a possibility of damage to users who visit the site, such as being redirected to another site, being sent to a sweepstakes site, or downloading malicious files due to WordPress tampering. This page explains how to respond to users (those who use the site)...
  4. Analysis of WordPress Malware Redirect Hack Techniques
    WordPress Doctor has been recovering sites that have suffered malware tampering, and we would like to explain what kind of redirect hacks (site tampering in which users who access the site are directed to Chinese sites, security sites, etc. without permission) that many sites in particular have been affected by recently. I would like to explain what the code looks...
  5. What if I get infected with malware disguised as an ico file in wordpress?
    We will provide an explanation of the malware that disguises itself as an ico file, which has recently been on a rampage, and introduce countermeasures....
  6. Can the WordPress database be tampered with or infected by malware?
    Most WordPress malware and tampering is done to program files, and only rarely is the database tampered with. However, when a database tampering vulnerability is found in a very popular plugin, database tampering (known as SQL injection) hacking can become an epidemic....